Repository navigation
Expand file tree
/
Copy pathbuild.memory
More file actions
71 lines (57 loc) · 9.2 KB
/
Copy pathbuild.memory
File metadata and controls
71 lines (57 loc) · 9.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
# Master Product & Architecture Ledger (build.memory)
## Product Identity & Placement
- **Product Name:** SPLAT (Security & Performance Live Autonomous Toolkit / System Protection & Live Autonomy)
- **Publisher:** Platten Industries
- **Role:** AI-Native Operational & Diagnostic Appliance for Windows Enterprise Workstations.
- **Product Definition:** An enterprise-governed execution dashboard allowing IT staff and non-technical operators to safely deploy autonomous, sandboxed AI agents to diagnose, triage, and self-heal system issues without writing code, exposing corporate credentials, or risking kernel instability.
---
## Target Organizations & User Personas
### Organizational Profiles
- **Campus-Style Environments (Universities, Hospitals, Research Hubs):** Multi-building subnetted topologies with federated domain boundaries, large helpdesk rotas, and high turnover of student techs or junior administrators who need guided runbooks without domain-admin elevation.
- **Corporate & Distributed Enterprises:** Centralized Active Directory / Microsoft Entra ID with thousands of Windows endpoints governed by Microsoft Intune, SCCM/MECM, and strict Endpoint Detection & Response (EDR) agents (CrowdStrike, Microsoft Defender for Endpoint).
- **Regulated Industries (Finance, Healthcare, Defense Contractors):** Entities subject to HIPAA, SOC 2 Type II, or CMMC requirements where unmonitored "Shadow AI" or raw data egress into public LLMs represents a catastrophic compliance breach.
### Target User Personas
- **Everyday Staff & Tier-1 Helpdesk (e.g. "Aunt Mary"):** Non-technical users who need 1-click problem solvers for internet drops, storage bloat, or security checks with plain-English executive answers and safe 1-click self-healing fixes.
- **Tier-2 IT & Field Support:** Technicians managing campus workstations, network switches, and local account permissions using guided parameter tuning.
- **Senior Infrastructure / SysAdmin Leads:** Architects who write, test, and publish signed 1:1:1 operational templates to standardize fleet-wide diagnostics.
- **Corporate SecOps & Compliance Directors:** Security stakeholders who require cryptographic audit chaining, Merkle tree verification, in-memory DLP, and strictly approved network egress firewalls.
---
## Architectural Positioning & Substrate Roadmap
- **Production Implementation (v1.0 — Windows Native):** Today's codebase is Windows-native end to end (`MissionExecutionEngine.cs`, `NtAclJailManager.cs`, `Win32JobSandbox.cs`, `SuspendedProcessLauncher.cs`, `RestrictedTokenProvider.cs`, `DpapiCredentialVault.cs`, `SqliteChainedAuditLedger.cs`). It enforces a strict **1:1:1 Governance Invariant** ($\text{1 Template} \rightarrow \text{1 Model} \rightarrow \text{1 Dedicated Native Tool} \rightarrow \text{1 Approved Egress FQDN}$) over an approved catalog.
- **Additive Interface Seams:** All process creation, sandboxing, and directory isolation are cleanly abstracted behind `IJailManager`, `IProcessLauncher`, and `IJobSandbox`. The upcoming Linux/eBPF runtime slots directly behind these seams as additive implementations without rewriting orchestration, DLP, or audit subsystems.
- **Roadmap Substrate (v2.0 — WSL2 / eBPF):** In-kernel BPF-LSM policy enforcement inside Hyper-V isolated WSL2 guest VMs. This in-kernel blast-radius containment is what **earns the right** to safely loosen the 1:1:1 invariant into multi-step agent tool chaining.
- **Stock Microsoft WSL2 Kernel (Verified):** The stock Microsoft WSL2 kernel (`6.18.33.2-2` / `6.6+`) includes all required configurations out of the box (`CONFIG_BPF=y`, `CONFIG_BPF_SYSCALL=y`, `CONFIG_BPF_JIT=y`, `CONFIG_BPF_LSM=y`, `CONFIG_HYPERV_VSOCKETS=y`, `CONFIG_OVERLAY_FS=y`, `CONFIG_DEBUG_INFO_BTF=y`). Activating BPF-LSM requires only adding `kernelCommandLine = ...lsm=...,bpf` in `%USERPROFILE%\.wslconfig`. No custom kernel fork or CVE maintenance burden is required.
- **Security Position:**
- *Boundary Definition:* In-kernel LSM software enforcement inside a hardware-isolated Hyper-V micro-VM guest.
- *Threat Model:* Blast-radius containment, not magic semantic prompt-injection detection. Compromised agents cannot escape assigned cgroup capabilities, filesystem boundaries, or network leases.
- *Lease Design:* Tool contracts compiled down to cgroup-scoped kernel policy with deterministic, seconds-scale single-use leases.
---
## The 10-Layer Enterprise Governed AI Agent Stack
1. **Layer 1: Intent & Interaction:** 1-Click Agent Squad Dashboard, First-Run Welcome Wizard, and Electric Blue glowing action buttons (`⚡`).
2. **Layer 2: Cognitive Brain:** Anthropic Claude Opus 5 (default) with Google Gemini as key-routed alternate provider; honest SIMULATED labeling when no key is configured.
3. **Layer 3: Local Semantic Memory:** In-process 128-dimensional vector embedding engine with cosine similarity search over past incidents.
4. **Layer 4: Zero-Trust Egress Firewall & DLP:** In-memory `DelegatingHandler` socket whitelist + regex engine scrubbing passwords, NTLM hashes, private keys, and emails before cloud transmission.
5. **Layer 5: Kernel Confinement & Hardware Sandbox (Windows Native / WSL2 Substrate Ready):**
- *Windows Native (v1.0):* Suspended `CreateProcessW` (`CREATE_SUSPENDED` `0x00000004`) + Win32 Job Object RAM/CPU clamps + Restricted Token Admin SID stripping (`S-1-5-32-544`) + Per-mission NT ACL Jails with severed inheritance (`SetAccessRuleProtection`).
- *WSL2 Substrate (v2.0):* Stock Microsoft WSL2 kernel guest with BPF-LSM syscall policy, cgroup resource clamps, and vsock communication.
6. **Layer 6: Native Confined Sensors:** Hardened non-interactive tool subprocesses (`wevtutil`, `wmic`, `ping`, `sc`, `whoami`, `reg`).
7. **Layer 7: Cryptographic Audit Ledger:** SQLite WAL mode with SHA-256 sequential chained hashing and Merkle tree root verification.
8. **Layer 8: Governed Self-Healing Remediations:** 1-click safe fix scripts (DNS flush, WinSock reset, temp cache purge, Defender start, Kerberos purge) with automatic undo/rollback support.
9. **Layer 9: Evidence Attestation (`TelemetryGrounder`):** Deterministic grounding of every model-derived finding against the raw sensor text that produced it. Checkable claims (addresses, counts, registry/file paths, binaries, percentages) must appear in the telemetry or the finding is marked `[UNSUPPORTED]`; percentages are reconciled as ratios so correct arithmetic is not flagged as fabrication. Findings are never dropped and `OverallStatus` is never downgraded — a Critical verdict with zero anchored findings is flagged in the headline instead. Closes the gap where Layers 4–7 would cryptographically notarize a hallucination.
10. **Layer 10: Retention & Cryptographic Erasure (`DataRetentionService`):** Per-COLUMN retention windows (raw telemetry 7d, operator parameters 7d, model analysis 30d, RAG index 30d, audit payloads 90d) with the mission metadata skeleton retained. Audit `Details` is cryptographically erased, never deleted: the chain commits to a salted digest (`HashVersion` 2), so destroying the plaintext AND its 256-bit salt leaves `VerifyLedgerIntegrityAsync` passing while making the surviving commitment non-invertible. `PRAGMA secure_delete=ON` + `wal_checkpoint(TRUNCATE)` + `VACUUM` ensure purged bytes leave the file rather than lingering in free pages and the -wal sidecar. Legacy v1 rows are reported as non-redactable rather than silently broken.
---
## The 8 Governed Autonomous AI Agents
1. 🌐 **Atlas-Net (Network Intelligence Agent):** Ping latency, DNS resolution, socket states + *1-Click DNS & WinSock Reset*.
2. 🛡️ **Sentinel-SecOps (Security Incident Agent):** Event 4624/4625 brute force, failed login surges + *1-Click Account Lockout Policy (Rollback enabled)*.
3. 💾 **Titan-SysOps (Storage Optimization Agent):** Disk volume capacity, cache bloat + *1-Click Temp Cache Purge*.
4. 🔒 **Aegis-Endpoint (Compliance & Defender Agent):** Microsoft Defender real-time protection + *1-Click Real-Time Shield Start*.
5. 🏛️ **Vanguard-AD (Identity & Kerberos Hunter):** Active Directory group delegation, privileged SIDs + *1-Click Kerberos Ticket Purge*.
6. ☁️ **Zephyr-Azure (Cloud Health & Hybrid Sync Agent):** Microsoft Entra ID hybrid sync, SSO login speed + *1-Click Cloud DNS Flush*.
7. 🛡️ **Chronos-Patch (Patch & Vulnerability Auditor):** Windows Quality updates, CVE exposure + *1-Click Windows Update Detection Scan*.
8. 🧹 **Cypher-Registry (Registry & Persistence Cleaner):** Run/RunOnce startup persistence keys + *1-Click RunOnce Cleaner (Rollback enabled)*.
---
## Enterprise Packaging & Verification
- **Packaging Pipeline (`packaging/build-msix.ps1`):** Self-contained `win-x64` Release compilation, enterprise code-signing certificate generation, and Authenticode SHA-256 digital signing.
- **Intune & SCCM Silent Deployment (`packaging/install-enterprise.ps1`):** Silent installer deploying cert to `TrustedPeople` and installing MSIX bundle.
- **Clean De-Provisioning (`packaging/uninstall-enterprise.ps1`):** Completely removes AppX and purges DPAPI vaults and active jails.
- **Test Suite (`tests/MissionController.Tests`):** **161/161 passing** across 30 files, `net9.0-windows`, warning-clean. Includes dedicated test fixtures for `TemplatePolicyCompiler`, `LeaseSpec`, `WslSubstrateHealthChecker`, and in-kernel BPF-LSM violation telemetry.